How this lookup works
The lookup finds the registry for the domain's top-level domain using IANA's RDAP bootstrap file, then queries that registry's RDAP service. For thin registries such as .com and .net, the registry record is brief, so we follow its link to the registrar's RDAP record for more detail. If a TLD has no RDAP service, we fall back to classic WHOIS on port 43, starting from IANA's referral.
How to read the results
- Registrar is the company the domain is registered through. Renewals, transfers and nameserver changes are made there. The IANA ID identifies accredited registrars.
- Registrant is usually redacted for privacy. You can typically reach the registrant through the registrar's contact form.
- Created / Updated / Expires are the key dates. An expired domain stops resolving, taking web and email with it.
- Status codes are standard EPP status values.
client transfer prohibitedis a registrar lock and is good to have.client holdorserver holdmeans the domain isn't published in DNS at all.redemption periodandpending deletemean it has expired and is close to being released. - Nameservers are the delegated DNS servers. If they're not the ones you expect, DNS changes you make elsewhere have no effect.
- DNSSEC shows whether the domain is signed (has a DS record at the registry).
The checks we run on the record
The results flag domains expiring within 60 days, domains without a transfer lock, holds and redemption status, and unsigned zones. Expiry within 30 days is a failure: auto-renew sometimes fails silently because of an expired card or a closed registrar account.
Related checks
Use the Nameserver Lookup to see what the delegation actually returns in DNS today, and the home page's domain report for a combined DNS and email health check. The nameserver migration guide covers changing DNS providers safely.
Updated 26 October 2026